EUVD-2026-49734

The PickPlugins Question Answer plugin for WordPress is vulnerable to SQL Injection in versions up to and including 1.2.73. This is due to insufficient sanitization of user-supplied input via the 'id' GET parameter in the user profile template combined with the use of wpunslash which removes...

CVE-2026-10207

The PickPlugins Question Answer plugin for WordPress is vulnerable to SQL Injection in versions up to and including 1.2.73. This is due to insufficient sanitization of user-supplied input via the 'id' GET parameter in the user profile template combined with the use of wpunslash which removes...

CVE-2026-10207

The CVE-2026-10207 issue affects the WordPress plugin PickPlugins Question Answer (WordPress) up to version 1.2.73 . The vulnerability is an SQL Injection caused by insufficient sanitization of the user-supplied input via the 'id' GET parameter in the user profile template, combined with wp_unsla...

CVE-2026-17528

creationtimestamp| type| source ---|---|--- 2026-07-28 08:53:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrozxatyca23...

CVE-2026-14870

creationtimestamp| type| source ---|---|--- 2026-07-28 08:48:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrozocfqqs2i...

CVE-2026-15012

creationtimestamp| type| source ---|---|--- 2026-07-28 08:43:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrozfdydns2s...

CVE-2026-16811

creationtimestamp| type| source ---|---|--- 2026-07-28 08:38:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mroz4fj7mn2x...

CVE-2026-14819

creationtimestamp| type| source ---|---|--- 2026-07-28 08:02:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrox3t5s5j2j...

CVE-2026-16587

The Advanced Form Integration — Connect Forms to 200+ Apps plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.6.0. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for...

EUVD-2026-49695

The Advanced Form Integration — Connect Forms to 200+ Apps plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.6.0. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for...

CVE-2026-16587 Advanced Form Integration <= 2.6.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary MailUp OAuth Token Overwrite via auth_redirect() Function

The Advanced Form Integration — Connect Forms to 200+ Apps plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.6.0. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for...

CVE-2026-39874

creationtimestamp| type| source ---|---|--- 2026-07-28 01:01:11+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mro7jycbc32j 2026-07-28 01:24:00+00:00| seen| https://bsky.app/profile/termsofsurrender.bsky.social/post/3mroasrtyly2b 2026-07-28 04:47:11+00:00| seen|...

CVE-2026-53668

creationtimestamp| type| source ---|---|--- 2026-07-28 00:59:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mro7glu6nf2x...

CVE-2026-65443

creationtimestamp| type| source ---|---|--- 2026-07-28 00:54:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mro75mxm2q2j...

CVE-2026-65447

creationtimestamp| type| source ---|---|--- 2026-07-28 00:26:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mro5lgmkep24...

CVE-2026-65439

creationtimestamp| type| source ---|---|--- 2026-07-28 00:22:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mro5fhjm5z2g 2026-07-28 14:05:17+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mrple3oeuj2z...

CVE-2026-65440

creationtimestamp| type| source ---|---|--- 2026-07-28 00:02:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mro4bmo6yw2j 2026-07-28 11:13:51+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mrpbrjlasm2z...

SUSE SLES15 Security Update : perl-DBI (SUSE-SU-2026:3283-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3283-1 advisory. This update for perl-DBI fixes the following issues - CVE-2026-14380: unvalidated string eval interpolation of the Profile package...

SUSE SLES16 Security Update : perl-DBI (SUSE-SU-2026:22845-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:22845-1 advisory. - CVE-2026-15392: failure to validate symbolic links during table path resolution could allow unauthorized file reads and writes...

PT-2026-65428

The PickPlugins Question Answer plugin for WordPress is vulnerable to SQL Injection in versions up to and including 1.2.73. This is due to insufficient sanitization of user-supplied input via the 'id' GET parameter in the user profile template combined with the use of wp unslash which removes...